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DETAILED ACTION 

1 . Claims 1 -8, 1 0-1 2, 1 4-1 5, 1 7-30, 34-38, 40-41 and 43-48 are pending in the 
present application. 

2. Claims 1,3,6,8,1 0-1 2, 25-26, 28-30, 34-35, 38, 40, 43, 45, and 47-48 have 
been amended. Claims 9, 13, 16, 31-33, 39, 42 and 49-63 have been cancelled. 

Claim Rejections - 35 USC §112 

3. The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

4. Claims 1-8, 10-12, 14-15, 17-30, 34-38, 40-41 and 43-48 are rejected under 35 
U.S.C. 112, second paragraph, as being indefinite for failing to particularly point out and 
distinctly claim the subject matter which applicant regards as the invention. 

Claim 1 recites the limitation "the plurality of entities" in line 13. There is 
insufficient antecedent basis for this limitation in the claim. Claims 2-8, 1 0-1 2, 1 4-1 5, 1 7- 
30, 34-38, 40-41 and 43-48 are rejected based on dependency. 

Regarding claim 44, the following claim language is vague and or not clear: 
"posting user-generated documents with user-authorized risk management information" 
[see: claim 44 lines 1-2]. 
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Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

This application currently names joint inventors. In considering patentability of 
the claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of 
the various claims was commonly owned at the time any inventions covered therein 
were made absent any evidence to the contrary. Applicant is advised of the obligation 
under 37 CFR 1 .56 to point out the inventor and invention dates of each claim that was 
not commonly owned at the time a later invention was made in order for the examiner to 
consider the applicability of 35 U.S.C. 103(c) and potential 35 U.S.C. 102(e), (f) or (g) 
prior art under 35 U.S.C. 103(a). 

6. Claims 1, 2, 6-8, 10-12, 14, 15, 17-24, 27-29, 34-38, 40, 41, 43, 45 and 46 are 
rejected under 35 U.S.C. 103(a) as being unpatentable over Bladen et al. US Patent 
Application Publication No. 2002/0099586 A1 in view of Schwartz US Patent Application 
Publication No. 2003/0037063 A1 and Schneider et al. US Patent 6,785,728 B1 . 

Regarding claim 1, Bladen et al. teaches a graphical and interactive interface 
system for managing risk management information [note: abstract "interactive risk 
management"; Figure 1C (112) E-RISK USER INTERFACE]; 
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a secure database having risk management information accessible by authorized 
access through a network [note: Fig. 2E, paragraph 0153, 0164-0165, 0178-0183]; 

a graphics interface for generating graphic data of the risk management 
information in response to the authorized access [note: paragraph 0197 authorized 
viewers; Figure 7B note generation process flowchart; Figure 1J graphical user- 
interface; also Figure 3D step 330]; and 

means for generating email to alert authorized users to updates to the risk 
management information, wherein the risk management information pertains to property 
risks associated with loss of existing property associated with the plurality of entities 
located at a plurality of respective facilities [note: FSS paragraph 0451 through 0459 
"automatic electronic updates ... Access to a help line ...e-mail"; paragraph 0354 feedback; 
note ability to define environment through policy statements paragraph 0309 and Figure 
3B; also note paragraphs 0283,0301-0302]. 

Although Bladen et al. teaches the invention substantially as cited above, they do 
not explicitly disclose that the email is generated to alert authorized users, however 
Schwartz teaches means for generating email through system software 324 as a 
means of automatic notification of updates [note: abstract; paragraph 0102 and 0106]. It 
would have been obvious to one of ordinary skill at the time of the invention to have 
combined Scwartz with Bladen et al. because Scwartz further shows how email may be 
implemented in a network system as a means of communication to alert the end user of 
changes. Bladen et al. and Scwartz do not teach "wherein the risk management 
information is segmented within the database for association with a plurality of 
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companies", however Schneider et al. teaches this feature. Schneider et al. teaches an 
access filter checks the trust level of each segment in a database [se: col. 21 line 56 
through col. 22 line 25]. It would have been obvious to one of ordinary skill at the time of 
the invention to have combined Schneider et al. with the cited references because 
Schneider et al's sclable access control filter allows the end user to define complex 
security policies in terms of not only users but information sets [note abstract]. 

7. Regarding claim 2, "the authorized access comprising user inputs to the graphics 
interface regarding risk management information" [Bladen et al. note paragraph 0197 
and 0198; paragraph 0053]. 

8. Regarding claims 1 7-24, "means for generating email generates email in 
response to receipt of an update ... periodic email defining updates " [note: Schwartz, 
Figure 3 communication interface 319; and paragraph 0102-0106]. 

9. Regarding claim 27, the database comprising a SQL database server [note: 
Bladen et al. teaches various embodiments may be implemented paragraphs 0175- 
0183]. 

10. Regarding claim 6, Bladen et al. teaches the invention substantially as applied to 
claim 1 including a graphical and interactive interface system [note Bladen et al.: 
abstract "interactive risk management"; Figure 1C (112) E-RISK USER INTERFACE; 
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paragraph 0197 authorized viewers; FSS paragraph 0451 through 0459 "automatic 
electronic updates ... Access to a help line ...e-mail"; paragraph 0354 feedback]. 
Although Bladen et al. teaches the invention substantially as cited above, they do not 
explicitly disclose that the email is generated to alert authorized users, however 
Schwartz teaches means for generating email through system software 324 as a means 
of automatic notification of updates [note: abstract; paragraph 0102 and 0106]. It would 
have been obvious to one of ordinary skill at the time of the invention to have combined 
Scwartz with Bladen et al. because Scwartz further shows how email may be 
implemented in a network system as a means of communication to alert the end user of 
changes. Bladen et al. and Scwartz do not teach "the database further comprising 
assistance data accessible concurrently with authorized access of the risk information", 
however Schneider et al. teaches this feature. Schneider et al. teaches an access policy 
may be defined in terms of both the user and information sets [see: col. 22 lines 45-64]. 
It would have been obvious to one of ordinary skill at the time of the invention to have 
combined Schneider et al. with the cited references because Schneider et al's sclable 
access control policy allows the end user to define specific access control functions. 

1 1 . Regarding claim 7, the assistance data comprises loss prevention and control 
standards and guidelines [note: Schneider et al. col. 22 lines 54-56 defining information 
sets]. 
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12. Regarding claims 8 and 11, prohibiting access ... restricting [note: Schneider et 
al. user group tables col. 28 line 59 through col. 29 line 64]. 

1 3. Regarding claim 1 0, "wherein at least part of the risk management information is 
encrypted to facilitate the authorized access" [note: Schneider et al. teaches ancrytion 
and decription, col. 21 line 49 through col. 22 line 43]. 

14. Regarding claims 12, 14, and 15, the filter functions comprising one or more of 
the following: country, city, state [note: Schneider et al. information may be defined]. 

15. Regarding claim 28, 29, 35, 38, 40-41 "the database responsive to electronically 
receive recommendations ..." [note: Bladen et al. provides for recommendations Figure 
3G (354)]. 

16. Regarding claim 34 further comprising means for appending user-generated 
comments to one or more segments [note: Schneider et al. col. 21 lines 10-47]. 

17. Regarding claims 36 and 37, "selectively switching between cost-benefit 
analysis, summaries, status screens, through the graphics interface ... [note Bladen et 
al.: Figure 1H interactive interface; Figure 5A 508; Figure 6A-6B; figure 12A-12B views]. 
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18. Regarding claim 43, "wherein updates to risk management information comprises 
modifications ... [note: Bladen FSS paragraph 0451 through 0459 "automatic electronic 
updates ... Access to a help line ...e-mail"; paragraph 0354 feedback]. 

1 9. Regarding claim 45, "wherein means for generating email comprises an email 
server [Bladen Figure 8D]. 

20. Claims 47, 46 and 3-5 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Bladen et al. US Patent Application Publication No. 2002/0099586 
A1 in view of Schwartz US Patent Application Publication No. 2003/0037063 A1 and 
Belloti et al. US Patent Application Publication No. 2003/0135554 A1 . 

Regarding claims 3, 46 and 47, Bladen et al. teaches a graphical and interactive 
interface system for managing risk management information [note: abstract "interactive 
risk management"; Figure 1C (112) E-RISK USER INTERFACE]. 

Although Bladen et al. teaches the invention substantially as cited above, they do 
not explicitly disclose that the email is generated to alert authorized users, however 
Schwartz teaches means for generating email through system software 324 as a 
means of automatic notification of updates [note: abstract; paragraph 0102 and 0106]. It 
would have been obvious to one of ordinary skill at the time of the invention to have 
combined Scwartz with Bladen et al. because Scwartz further shows how email may be 
implemented in a network system as a means of communication to alert the end user of 
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changes. Bladen et al. and Scwartz do not explicitly teach "further comprising a 
workflow application connected in network with the database for interfacing between 
one or more access terminals and the database . Bellotti et al. teaches minimizing 
security risks by integrating workflow terminals [see: abstract; Figure 2 (214); Figure 1 
(200) workflow system; paragraph 0045]. It would have been obvious to one of ordinary 
skill at the time of the invention to have combined Bellotti et al. with the cited references 
because a workflow system would provide supervisory or administrative functions that 
would allow work to be monitored, audited, or applied to a specific process [see 
paragraph 0043]. 

Regarding claims 4-5, the terminals comprising a computer ... facsimile ... [note: 
Bellotti et al. paragraph 0034; paragraph 0045]. 

Response to Arguments 

21 . Applicant's arguments filed May 1 6, 2008 have been fully considered but they are 
not persuasive. In the response Applicant argued the prior art does not teach the added 
limitation "wherein the risk management information pertains to property risks 
associated with loss of existing property associated with the plurality of entities located 
at a plurality of respective facilities". In response to applicant's argument the examiner 
respectfully disagrees. Note Bladen et al. teaches the ability to define the environment 
or discipline through policy statements see paragraph 0309 and Figure 3. Also note 
paragraphs 0301-0302 and 0283 defining specific information and site-specific files. 
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Schneider provides for the feature of risk management information that is segmented 
within the database based on authorized access [see: col. 21 line 56 through col. 22 line 
25 access filter checks the trust of each segment in a database]. 

Conclusion 

22. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 

§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

23. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Greta L. Robinson whose telephone number is 
(571)272-41 18. The examiner can normally be reached on M-F 9:30AM-6:00PM. 



Application/Control Number: 10/085,497 Page 1 1 

Art Unit: 2168 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Tim T. Vo can be reached on (571 )272-3642. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/Greta L. Robinson/ 

Primary Examiner, Art Unit 2168 

July 16, 2008 



